Privacy Policy

Overview

KindaBroke is currently offered in the United States only. This policy applies to information collected through the website, app, and support interactions related to the service.

Data Collected

We collect the following categories of information when you use the service:

• email address
• name / display name
• budgeting data
• expenses, income, categories
• IP address
• device / browser information
• cookies
• analytics events
• crash / error logs
• support messages

Data Not Collected

The service is not designed to collect the following categories of information:

• bank account login credentials
• Plaid data
• stored payment card numbers
• government ID uploads
• Social Security numbers
• third-party account passwords

How Data Is Used

We use collected information to create and manage accounts, provide budgeting features, operate subscriptions, respond to support requests, analyze usage, maintain service performance, and investigate misuse or security issues.

Sharing of Data

We may share data with service providers that help us operate the service and with parties when disclosure is required by law or reasonably necessary to protect the service, users, or others.

We do not promise that data will never be disclosed where disclosure is legally required or operationally necessary.

Third-Party Providers

The following third-party providers may process data in connection with their services:

• Supabase (authentication and database)
• Vercel (hosting, deployment, analytics)
• Stripe (subscriptions and billing)
• Resend (email delivery)
• Google Analytics (analytics)
• GitHub (code hosting)

Cookies & Analytics

We use cookies and analytics tools to help operate the service, understand usage, and measure performance.

Analytics-related processing may involve providers such as Vercel and Google Analytics.

Data Retention

We keep information for as long as reasonably necessary to provide the service, maintain records, investigate issues, meet legal obligations, or enforce our terms.

Retention periods may vary depending on the type of data and the reason it was collected.

Data Security

Encryption in transit is handled by third-party providers.

Encryption at rest is handled by third-party providers.

Logging and monitoring are used to help operate and protect the service.

Multi-factor authentication is not currently available.

No system can be guaranteed to be completely secure, and no security outcome is guaranteed.

Account Deletion

Users can delete their account.

Active data is deleted promptly, subject to legal, technical, fraud-prevention, and system constraints.

Deletion requests do not mean that all copies are immediately removed from logs, backups, or other systems in every case.

User Rights

Depending on applicable law, you may have rights to request access, correction, deletion, or additional information about personal data.

Rights and verification procedures may vary by state and may be updated later as the service evolves.

California Notice Placeholder

California-specific privacy disclosures, rights details, and request instructions may be added or expanded here in a future update if applicable.

Placeholder for a fuller California notice.

Children's Privacy

The service is not directed to children under 13.

If we learn that we have knowingly collected personal information from a child under 13 in a manner not permitted by law, we may take steps to delete that information.

International Placeholder

KindaBroke is currently available in the United States only. If the service expands internationally, these disclosures may be updated.

Placeholder for international data transfer and regional rights disclosures if expansion occurs.

Changes

We may revise this Privacy Policy from time to time. The updated version will apply when posted with a revised effective date.

Contact

For privacy-related questions or requests, contact us using the details below.

• Legal: feedback@web54.dev
• Support: feedback@web54.dev
• Mailing address available upon request.